CVE-2022-2092: Wpovernight Woocommerce PDF Invoices& Packing Slips

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

Affected products

• Wpovernight Woocommerce PDF Invoices& Packing Slips: before 2.16.0 (fixed in 2.16.0)

Published 2022-07-11. Last modified 2026-06-17.